The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...

Powered by the TypesScript-native runtime Bun, Electrobun improves Electron with a smaller application footprint and built-in ...

Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day ...

Overview:  Chrome extensions can make coding easier. They help developers inspect websites, find errors, and test features quickly.The right tools can save ...

New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.

Updates for devices as far back as iPhone 6s and iPod Touch 7th generation fix vulnerabilities associated with the Coruna ...

VS Code keeps adding new features as time goes on, and if you weren't careful, you likely missed things like sticky scroll, ...

Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.

Google releases an emergency Chrome update fixing two zero-day vulnerabilities affecting Skia and the V8 engine on desktop systems.

It always pays to top up your browser security.